Vulnerability in Cvs

CVE-2005-2693

cvsbug in CVS 1.12.12 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack.

EPSS: 0.004 (36.3th percentile) — read the EPSS interpretation.

Affected products

  • Cvs — versions 1.12.12
  • N/a — versions n/a

References